For people who found del.icio.us perfect and everything since bloated, linkding is the bookmark manager - a Django application whose entire design goal is saving and finding links with zero friction. Paste a URL and it fetches the title, description, favicon, and preview image automatically; organize with tags, search full-text across everything, mark bookmarks unread for read-it-later, attach Markdown notes, and bulk-edit whole selections at once. Its answer to link rot is archiving: bookmarked pages can be snapshotted automatically, either submitted to the Internet Archive or saved as local HTML files, and a documented SingleFile browser-extension integration uploads full self-contained page captures straight to your instance. Official Firefox and Chrome extensions (plus a bookmarklet) make saving a one-click habit, the UI installs as a Progressive Web App on mobile, and multi-user support with bookmark sharing - to users or logged-out guests - covers families and teams, with SSO via OIDC when needed. The REST API (create, search, filter by tag) has spawned a genuine ecosystem of community mobile apps and libraries. Operationally it is famously boring in the best way: one small container, SQLite by default, automated migrations, and a zero-breaking-changes policy. Import and export use standard Netscape HTML. MIT-licensed.

HomeGallery turns the photo and video folders on your server into a mobile-friendly web gallery. Your files and folder structure stay exactly as they are. Point it at camera files, phone files, or offline drives, and previews and metadata are extracted once. Scroll one endless stream, newest first. Open any image for its file name, dimensions, capture date, source paths, camera settings, street address, tags, and detected objects. Swipe between photos, then pinch or double-tap to zoom. The Map view clusters photos by place, with counts. The plant button lists similar images, so one sunset finds every other sunset. Face search finds the same person in other photos. A search box accepts expressions like tags in (vacation, family), type:video year in [2015:2020] order by duration, or not exists(geo). In Edit mode, select many photos at once and type comma-separated tags; a minus prefix removes one. Videos are transcoded for playback. Renamed or moved files keep their previews. An archive disk can stay unplugged once indexing is done. Optional logins limit each user to a query filter. Install it as a PWA for a lightweight mobile app. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Stalled torrents, malware-laced archives, and failed imports can quietly paralyze an automated media server, and Cleanuparr eliminates those bottlenecks as an autonomous download queue manager and library seeker for the entire Servarr ecosystem. Connecting directly to Sonarr, Radarr, Lidarr, Readarr, Whisparr, Sportarr, and LazyLibrarian alongside qBittorrent, Transmission, Deluge, rTorrent, uTorrent, and SABnzbd, its configurable Queue Cleaner tracks slow transfers, stuck metadata downloads, and import failures using a strike system. Once a problematic download reaches its strike threshold or triggers the Malware Blocker against deceptive .lnk and .zipx payloads, Cleanuparr purges the offending files, blocklists the release, and instructs the media manager to search for a clean replacement. Beyond defensive queue hygiene, the built-in Seeker proactively searches your libraries for missing episodes or movies, hunts for Cutoff Unmet quality upgrades, and tracks Custom Format score distributions over time. Storage administrators can also enforce seeding duration limits, clean up orphaned torrents without breaking active cross-seed hardlinks, and quarantine unclaimed directory files before they consume disk capacity. A live web dashboard visualizes manual intervention alerts, strike histories, and searchable application logs while dispatching instant notifications through Apprise, Discord, Gotify, Notifiarr, Ntfy, Pushover, and Telegram. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Unpatched Linux servers expose production environments to critical vulnerabilities, and PatchMon eliminates that blind spot by centralizing package telemetry, security advisory tracking, and automated update orchestration across your entire fleet. Administrators can inspect pending updates across APT, DNF, YUM, APK, Pacman, Zypper, FreeBSD pkg, Windows Update, and winget from one unified queue without opening inbound firewall ports on monitored hosts. Before touching production workloads, operators run dry-run validations to preview exact package transactions, enforce multi-user approval workflows, and schedule rollouts during fixed maintenance windows. During execution, live agent output streams directly to the browser over WebSocket so engineers can watch progress in real time or halt a problematic upgrade mid-flight. Beyond package updates, the platform runs OpenSCAP CIS benchmark and Docker Bench security assessments, inventories running containers and outdated base images, and routes host-down or threshold alerts to Slack, Discord, Microsoft Teams, ntfy, or email. Built-in browser SSH and Apache Guacamole RDP terminals let teams troubleshoot machines directly through the outbound agent tunnel with role-based access control and OIDC single sign-on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Ever Works transforms a single text prompt into a fully researched, written, coded, and deployed website through autonomous AI agents that operate on a configurable 15-step generation pipeline. Unlike one-shot builders, it continuously improves generated content on a schedule, keeping sites fresh without manual intervention. The platform integrates with six AI providers (OpenAI, Anthropic, Google, Groq, Mistral, Ollama) via gateways like OpenRouter and Vercel AI Gateway, while its plugin system connects ten search providers including Tavily, Brave, Exa, SerpAPI, and Perplexity for deep autonomous research. Every generation is Git-native — code and content live in your own GitHub repositories as commits, providing full version control, portability, and zero vendor lock-in. The monorepo ships a NestJS 11 REST API with JWT authentication, a Next.js 16 web dashboard for managing works, a CLI for terminal operations, an MCP server for AI agent integration, and admin tooling. Content management supports items, categories, tags, and collections, while deployment targets include Vercel and Kubernetes. Background processing runs on Trigger.dev with BullMQ scheduling, and monitoring leverages Sentry plus PostHog for error tracking and product analytics. The platform supports OAuth via GitHub and Google, subscription billing, email notifications, and AI chat conversations for natural-language interaction with your generated works. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

SurveyKing combines survey creation and online examination in a single platform — generate complete questionnaires from plain English via built-in LLM integration, administer timed exams with anti-cheating proctoring, and collect structured data through 20+ question types including matrix questions, cascading selectors, file uploads, and electronic signatures. Built on Spring Boot 3 with a React and TypeScript frontend using the UMI framework and Ant Design components, version 1.12 delivers each question type with independent validation rules, data type controls, and formula calculations. The AI engine connects to mainstream LLMs for survey generation from natural language prompts and provides real-time answer explanations during practice sessions. Exam mode features item banks with Word and Excel bulk import, fixed and randomized question selection, composite paper assembly, live proctoring dashboards with anti-cheating controls, automatic and manual grading with per-question scoring, and PDF score report archiving. The visual logic designer and DSL expression engine handle show/hide conditions, required rules, skip branching, quota controls, randomization, and cross-tabulation analysis with SPSS export. Role-based access controls support multi-user collaboration with department and permission management via Spring Security and JWT authentication. Redis handles caching and queuing while MyBatis Plus manages database operations. Deploy via a single Docker command with embedded H2 for trials or Docker Compose with MySQL for production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Manga collections tend to get trapped on a single phone; Suwayomi moves the library, downloads, and reading progress onto a server you run, so every browser and device sees the same shelf. In the browser, a built-in reader handles single page, double page, continuous vertical, continuous horizontal, and webtoon layouts, adding image filters, custom keybinds, auto scrolling, and separate desktop and mobile views. Content comes from Mihon (Tachiyomi) extensions, which can be searched, browsed, and sorted into categories, with custom extension stores loaded from JSON or Protobuf indexes. Downloads save chapters as CBZ archives for offline reading, and the server checks the library for new chapters every 12 hours by default, fetching them automatically if you allow it. Progress follows you through MyAnimeList, AniList, and MangaUpdates, a Suwayomi extension and tracker for Mihon, SyncYomi servers, and KOReader. E-reader apps connect over OPDS feeds, scheduled Mihon-compatible backups protect the library, and FlareSolverr or Byparr support handles Cloudflare-protected sources. Public instances can be locked down with basic authentication, a simple login page, or JWT-based UI login, and a PostgreSQL backend, still in beta, can replace the default file store. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

With over 36,000 GitHub stars and adoption by organizations including Adobe, Shopify, and Roblox, HashiCorp Vault is the industry-standard platform for secrets management, encryption services, and privileged access control across hybrid and multi-cloud infrastructure. The key/value secrets engine stores arbitrary secrets with full versioning, soft-delete, and metadata tracking, while dynamic secrets engines generate on-demand, short-lived credentials for AWS, Azure, GCP, databases including PostgreSQL, MySQL, MongoDB, and MSSQL, and SSH access with automatic revocation after configurable lease periods. The PKI secrets engine dynamically issues X.509 certificates on demand with automatic rotation and ACME protocol support, eliminating manual certificate management workflows entirely. Encryption as a service through the transit secrets engine lets applications encrypt, decrypt, sign, verify, and generate HMACs without managing cryptographic keys directly, supporting AES-GCM-256, ChaCha20-Poly1305, RSA-2048/4096, ECDSA-P256/P384, and ED25519 algorithms. Authentication integrates with LDAP, OIDC/OAuth2, SAML, AppRole for machine-to-machine access, Kubernetes service accounts, AWS IAM, Azure Active Directory, and GitHub tokens. Fine-grained ACL policies use path-based rules with glob patterns and sentinel policies for programmatic enforcement. The integrated Raft storage backend provides high-availability clustering without external dependencies, while alternative backends include Consul, S3, DynamoDB, PostgreSQL, and MySQL. The built-in web UI provides a visual interface for browsing secrets, managing policies, configuring auth methods, and monitoring cluster health. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed.

An agent run can finish without errors and still give the wrong answer, so TraceRoot traces every model and tool call, flags the production runs that missed the mark, and helps your coding agent ship verified fixes. Each run becomes a browsable call tree with inputs, outputs, latency, and cost, searchable by session or filter. Instrument with the Python or TypeScript SDK, the agent-native CLI, or any OpenTelemetry exporter, with ready integrations for LangChain, LangGraph, OpenAI Agents SDK, CrewAI, Vercel AI SDK, Mastra, and Pydantic AI. Detectors use LLM judges to score live traffic against the behavior you define and can post alerts to Slack. Judge outputs cluster into signals, then a background coding agent reads the traces and your connected GitHub code in a sandbox and recommends changes down to the commit, file, and line. Datasets, test cases, and scored eval runs compare versions so regressions surface before a release, and dashboards of widgets chart your trace data. The CLI hands your coding agent, such as Claude Code or Codex, the traces, signals, detectors, and evals to work from. Self-hosting keeps all of that trace data on infrastructure you control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed (core edition).

Krayin CRM gives sales teams a visual Kanban pipeline where leads flow through configurable stages — new, contacted, qualified, proposal, won, lost — with deal values tracked per stage, drag-and-drop transitions, and AI-powered document import that extracts contact details from uploaded PDFs, DOCs, and images without manual data entry. Built on Laravel 12 with a Vue.js frontend and MySQL database, the platform delivers complete customer lifecycle management through a two-stage contact model separating unqualified Leads from qualified Persons linked to Organizations, with a unified timeline displaying associated activities, notes, emails, and deals. The activity module schedules calls, meetings, and tasks on a drag-and-drop calendar with reminders and team assignment. A built-in product catalog supports line-item quoting with pricing and quantities. Email integration connects via SMTP, IMAP, and SendGrid parsing, linked to leads and contacts automatically. Workflow automation triggers actions on conditions and pushes events to external systems via webhooks. The dashboard visualizes pipeline performance, top customers, top products, and email engagement with pie charts and trend widgets. Custom attributes add text, number, date, boolean, and dropdown fields to any entity. Role-based ACLs manage team permissions per module. Extensions add multi-tenant SaaS, WhatsApp lead generation, and VoIP calling. Deploy via Docker Compose. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Command and automate your entire fleet of 3D printers without relying on proprietary cloud services using Bambuddy, a self-hosted management hub that delivers local network control, print scheduling, and job archiving for Bambu Lab hardware. Print shop operators can route slicing output directly from Bambu Studio or Orca Slicer through virtual printer proxies that emulate physical machines while automatically cataloging print files in a searchable 3D repository. The automated dispatch engine assigns queued gcode files to available printers based on required nozzle temperatures, build plate dimensions, and matched multi-color filament slots. Users can inspect live camera streams across multiple printing beds simultaneously, verify empty build plates before dispatching new jobs, and generate stabilized timelapse videos with custom music. Integrated smart plug connectors automatically cut power to idle machines when print cycles finish and trigger push notifications to Discord or mobile devices if thermal anomalies or mechanical pauses occur. Farm managers can schedule maintenance alerts based on cumulative motor runtime, track spool inventory levels across storage locations, and synchronize printing configurations across duplicate hardware setups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.

With nearly 14,000 GitHub stars and over 200 releases, Semaphore UI has established itself as the lightweight yet powerful alternative to enterprise automation platforms like Ansible AWX and Jenkins. Unlike AWX's heavyweight Kubernetes-dependent architecture, Semaphore ships as a single Go binary with zero external runtime dependencies — install it, run setup, and you have a production-ready automation server in minutes. The platform natively orchestrates Ansible playbooks, Terraform and OpenTofu infrastructure code, Terragrunt configurations, PowerShell scripts, Bash commands, and Python automation, all from a clean Vue.js web interface that displays task history, execution logs, and scheduling status at a glance. Semaphore supports concurrent task execution across multiple servers using distributed project runners, enabling horizontal scaling of automation workloads without complex clustering. The built-in inventory management system handles both static and dynamic inventory sources, while four-level RBAC (Owner, Manager, Task Runner, Guest) provides granular access control for team environments. Notifications flow to Slack, Microsoft Teams, Telegram, email, Rocket.Chat, and Gotify, keeping operators informed of failed tasks and deployment status. Integration with HashiCorp Vault secures sensitive credentials, and the comprehensive REST API with built-in Swagger documentation enables programmatic automation. Deploy via Docker Compose, Helm chart for Kubernetes, or native packages for Debian, Ubuntu, and RHEL-based distributions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

DCM is a visual builder that eliminates docker-compose copy-paste anxiety for home server enthusiasts. The TypeScript and Next.js web interface on port 7576 presents a curated catalog of popular self-hosted applications organized into categories: media management with Jellyfin, Plex, Sonarr, Radarr, and Prowlarr; dashboards like Homarr and Heimdall; databases including PostgreSQL, MariaDB, MongoDB, and Redis; monitoring stacks with Grafana and Prometheus; download clients like qBittorrent and NZBGet; security tools including Vaultwarden; storage solutions like Nextcloud; and home automation via Home Assistant. Select any combination of containers and DCM generates both compose.yaml and .env files with correct volume mounts, environment variables, PUID/PGID ownership, network modes, and port mappings — ready to paste into your terminal. Automatic port conflict detection identifies clashing services and reassigns ports before you ever hit a deployment error. The Template Gallery ships predefined multi-container stacks for common setups: media servers, development environments, database clusters, and monitoring solutions — some incorporating ten or more services in a single template. Built as a static Next.js export served from a 62 MB multi-arch Docker image supporting amd64, arm64, and arm/v7, DCM runs on everything from rack servers to Raspberry Pis. Share generated configurations via URL or download them locally. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every production incident starts the same way: someone asks "what do the logs say?" and the answer takes 45 minutes to find. LogTide collapses that search into seconds with a unified observability platform that indexes logs, traces, and metrics into a single queryable interface, backed by your choice of TimescaleDB, ClickHouse, or MongoDB. The log search interface supports full-text queries across millions of entries with filters for trace ID, session ID, project, service, hostname, and severity level, plus a live tail mode that streams new log lines as they arrive. Distributed traces render as waterfall timelines showing every span, its duration, and cross-service dependencies, while correlated logs for each trace are one click away. The metrics explorer visualizes OTLP gauge and counter data from your applications with system CPU, memory, disk, and network panels that update in near real-time. Where LogTide diverges from standard observability is its built-in SIEM engine: Sigma-compatible detection rules scan incoming logs for security threats like SQL injection, privilege escalation, lateral movement, and C2 communication, surfacing findings on a dedicated security dashboard with severity distribution, detection timelines, and affected service breakdowns. Alerting pushes notifications to Email, Slack, or Discord webhooks when thresholds trip or security rules fire. Native SDKs for Node.js, Python, Go, PHP, Kotlin, and Ruby ship logs with retry logic and circuit breakers, and the platform accepts OpenTelemetry data natively. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Instead of relying on third-party cloud trackers to keep watched history aligned across Plex, Jellyfin, and Emby, WatchState synchronizes playback state and watch progress directly between your own self-hosted media servers. Household administrators can map multiple family members across independent backend accounts using isolated user identities, configuring either one-way mirroring from a primary server or full many-to-many synchronization across every connected instance. A unified generic webhook endpoint captures play, pause, stop, and watched events from Plex, Tautulli, Jellyfin, and Emby for near-instant state propagation, while scheduled background import and export tasks reconcile any missed updates automatically. When libraries grow across multiple servers, the built-in Media Health diagnostic engine audits the database for external GUID conflicts, duplicate file references, metadata disagreements, weak matches, and missing local files, complete with exportable reports and per-record action hints. Users can also search backend metadata, inspect detailed item event logs, and export portable JSON backups of their entire watch history for safe server migrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

ZTNET provides a polished web dashboard for running your own ZeroTier network controller, covering network creation, member authorization, IP assignment, flow rule editing, and real-time node monitoring entirely from the browser. The organization system supports multi-tenant deployments where teams manage separate network pools with role-based permissions and customizable email notification templates for events like member joins, departures, IP changes, and authorization updates. Each network view displays connected members with their ZeroTier addresses, assigned IPs, last-seen timestamps, physical endpoints, and protocol versions in a clean tabular layout. The admin panel provides platform-wide user management, SMTP configuration for transactional emails, and system-level settings. Built on the T3 stack with Next.js, Prisma ORM, tRPC, TypeScript, and Tailwind CSS with DaisyUI components, the application supports both PostgreSQL and SQLite for persistence and communicates directly with the ZeroTier controller daemon through its native API. Dark and light themes adapt to user preference, and responsive layouts make network management practical from any device. Docker Compose bundles the web application alongside the ZeroTier controller service. Over 100,000 Docker pulls confirm steady community adoption. GPL-3.0 licensed.

One endpoint for every MCP server you run: MCPHub gathers local and remote Model Context Protocol servers behind stable URLs, so AI clients connect once and see what you allow. Claude Code, Cursor, and Cherry Studio can use four routes: everything at /mcp, a named group at /mcp/{group}, one server at /mcp/{server}, or semantic tool search at /mcp/$smart. Smart routing runs vector search on PostgreSQL with pgvector and an OpenAI-compatible key, so the model gets a shorter tool list. Servers attach over stdio, SSE, or streamable HTTP, OpenAPI services can be wrapped as MCP tools, and changes apply without downtime. In the other direction, MCP tools can be exported as an OpenAPI 3.0.3 spec for OpenWebUI and other OpenAPI clients. Bearer keys, OAuth 2.0 (client and server modes), and GitHub or Google sign-in in database mode control access, with per-user visibility for servers and groups. Encrypted per-user credentials let one shared server use each person's own key. Logs show tool-call activity, request status, and latency, health checks track each connection, and the dashboard controls which tools, prompts, and resources each server exposes. Large text tool results can be compressed, interactive MCP Apps are proxied through MCPHub routes, and a built-in market lets you browse a server catalog. Typical uses include a team-wide gateway, per-project groups, and direct single-server routes for debugging. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Carbon delivers a unified manufacturing operating system that eliminates the integration tax of running separate ERP, MES, and QMS platforms. The Remix and TypeScript frontend paired with Supabase PostgreSQL backend provides full-stack type safety from database schema to React components, with real-time subscriptions pushing production floor updates to every connected client. The built-in MCP server exposes 1,374 operations across 15 modules through three discovery tools, enabling AI agents to interact with manufacturing data while respecting attribute-based access control. Nested bill of materials with unlimited depth supports complex assemblies, while the MRP engine calculates material requirements across multi-level structures with configurable lead times and safety stock. The configurator handles configure-to-order scenarios with rule-based variant generation. Full lot and serial traceability from receiving through shipping satisfies AS9100, ISO 13485, CFR Part 11, and ITAR compliance requirements. Custom fields extend any entity without schema modification, and the app framework lets integrators build domain-specific modules that plug into the core navigation, permissions, and data layer. Typed API clients for TypeScript, Python, C#, and cURL enable programmatic access to every manufacturing operation. Docker-based local development boots Postgres, Redis, Inngest, and the application stack with a single CLI command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.